You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
176 lines
7.5 KiB
176 lines
7.5 KiB
8 months ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
#pragma warning disable
|
||
|
using System;
|
||
|
using System.IO;
|
||
|
|
||
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls
|
||
|
{
|
||
|
/// <summary>RFC 5246 7.4.1.4.1</summary>
|
||
|
public sealed class SignatureAndHashAlgorithm
|
||
|
{
|
||
|
public static readonly SignatureAndHashAlgorithm ecdsa_brainpoolP256r1tls13_sha256 =
|
||
|
Create(SignatureScheme.ecdsa_brainpoolP256r1tls13_sha256);
|
||
|
public static readonly SignatureAndHashAlgorithm ecdsa_brainpoolP384r1tls13_sha384 =
|
||
|
Create(SignatureScheme.ecdsa_brainpoolP384r1tls13_sha384);
|
||
|
public static readonly SignatureAndHashAlgorithm ecdsa_brainpoolP512r1tls13_sha512 =
|
||
|
Create(SignatureScheme.ecdsa_brainpoolP512r1tls13_sha512);
|
||
|
public static readonly SignatureAndHashAlgorithm ed25519 =
|
||
|
Create(SignatureScheme.ed25519);
|
||
|
public static readonly SignatureAndHashAlgorithm ed448 =
|
||
|
Create(SignatureScheme.ed448);
|
||
|
public static readonly SignatureAndHashAlgorithm gostr34102012_256 =
|
||
|
Create(HashAlgorithm.Intrinsic, SignatureAlgorithm.gostr34102012_256);
|
||
|
public static readonly SignatureAndHashAlgorithm gostr34102012_512 =
|
||
|
Create(HashAlgorithm.Intrinsic, SignatureAlgorithm.gostr34102012_512);
|
||
|
public static readonly SignatureAndHashAlgorithm rsa_pss_rsae_sha256 =
|
||
|
Create(SignatureScheme.rsa_pss_rsae_sha256);
|
||
|
public static readonly SignatureAndHashAlgorithm rsa_pss_rsae_sha384 =
|
||
|
Create(SignatureScheme.rsa_pss_rsae_sha384);
|
||
|
public static readonly SignatureAndHashAlgorithm rsa_pss_rsae_sha512 =
|
||
|
Create(SignatureScheme.rsa_pss_rsae_sha512);
|
||
|
public static readonly SignatureAndHashAlgorithm rsa_pss_pss_sha256 =
|
||
|
Create(SignatureScheme.rsa_pss_pss_sha256);
|
||
|
public static readonly SignatureAndHashAlgorithm rsa_pss_pss_sha384 =
|
||
|
Create(SignatureScheme.rsa_pss_pss_sha384);
|
||
|
public static readonly SignatureAndHashAlgorithm rsa_pss_pss_sha512 =
|
||
|
Create(SignatureScheme.rsa_pss_pss_sha512);
|
||
|
|
||
|
public static SignatureAndHashAlgorithm GetInstance(short hashAlgorithm, short signatureAlgorithm)
|
||
|
{
|
||
|
switch (hashAlgorithm)
|
||
|
{
|
||
|
case HashAlgorithm.Intrinsic:
|
||
|
return GetInstanceIntrinsic(signatureAlgorithm);
|
||
|
default:
|
||
|
return Create(hashAlgorithm, signatureAlgorithm);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
private static SignatureAndHashAlgorithm GetInstanceIntrinsic(short signatureAlgorithm)
|
||
|
{
|
||
|
switch (signatureAlgorithm)
|
||
|
{
|
||
|
case SignatureAlgorithm.ed25519:
|
||
|
return ed25519;
|
||
|
case SignatureAlgorithm.ed448:
|
||
|
return ed448;
|
||
|
case SignatureAlgorithm.gostr34102012_256:
|
||
|
return gostr34102012_256;
|
||
|
case SignatureAlgorithm.gostr34102012_512:
|
||
|
return gostr34102012_512;
|
||
|
case SignatureAlgorithm.rsa_pss_rsae_sha256:
|
||
|
return rsa_pss_rsae_sha256;
|
||
|
case SignatureAlgorithm.rsa_pss_rsae_sha384:
|
||
|
return rsa_pss_rsae_sha384;
|
||
|
case SignatureAlgorithm.rsa_pss_rsae_sha512:
|
||
|
return rsa_pss_rsae_sha512;
|
||
|
case SignatureAlgorithm.rsa_pss_pss_sha256:
|
||
|
return rsa_pss_pss_sha256;
|
||
|
case SignatureAlgorithm.rsa_pss_pss_sha384:
|
||
|
return rsa_pss_pss_sha384;
|
||
|
case SignatureAlgorithm.rsa_pss_pss_sha512:
|
||
|
return rsa_pss_pss_sha512;
|
||
|
case SignatureAlgorithm.ecdsa_brainpoolP256r1tls13_sha256:
|
||
|
return ecdsa_brainpoolP256r1tls13_sha256;
|
||
|
case SignatureAlgorithm.ecdsa_brainpoolP384r1tls13_sha384:
|
||
|
return ecdsa_brainpoolP384r1tls13_sha384;
|
||
|
case SignatureAlgorithm.ecdsa_brainpoolP512r1tls13_sha512:
|
||
|
return ecdsa_brainpoolP512r1tls13_sha512;
|
||
|
default:
|
||
|
return Create(HashAlgorithm.Intrinsic, signatureAlgorithm);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
private static SignatureAndHashAlgorithm Create(int signatureScheme)
|
||
|
{
|
||
|
short hashAlgorithm = SignatureScheme.GetHashAlgorithm(signatureScheme);
|
||
|
short signatureAlgorithm = SignatureScheme.GetSignatureAlgorithm(signatureScheme);
|
||
|
return Create(hashAlgorithm, signatureAlgorithm);
|
||
|
}
|
||
|
|
||
|
private static SignatureAndHashAlgorithm Create(short hashAlgorithm, short signatureAlgorithm)
|
||
|
{
|
||
|
return new SignatureAndHashAlgorithm(hashAlgorithm, signatureAlgorithm);
|
||
|
}
|
||
|
|
||
|
private readonly short m_hash;
|
||
|
private readonly short m_signature;
|
||
|
|
||
|
/// <param name="hash"><see cref="HashAlgorithm"/></param>
|
||
|
/// <param name="signature"><see cref="SignatureAlgorithm"/></param>
|
||
|
public SignatureAndHashAlgorithm(short hash, short signature)
|
||
|
{
|
||
|
/*
|
||
|
* TODO]tls] The TlsUtils methods are inlined here to avoid circular static initialization
|
||
|
* b/w these classes. We should refactor parts of TlsUtils into separate classes. e.g. the
|
||
|
* TLS low-level encoding methods, and/or the SigAndHash registry and methods.
|
||
|
*/
|
||
|
|
||
|
//if (!TlsUtilities.IsValidUint8(hash))
|
||
|
if ((hash & 0xFF) != hash)
|
||
|
throw new ArgumentException("should be a uint8", "hash");
|
||
|
|
||
|
//if (!TlsUtilities.IsValidUint8(signature))
|
||
|
if ((signature & 0xFF) != signature)
|
||
|
throw new ArgumentException("should be a uint8", "signature");
|
||
|
|
||
|
this.m_hash = hash;
|
||
|
this.m_signature = signature;
|
||
|
}
|
||
|
|
||
|
/// <returns><see cref="HashAlgorithm"/></returns>
|
||
|
public short Hash
|
||
|
{
|
||
|
get { return m_hash; }
|
||
|
}
|
||
|
|
||
|
/// <returns><see cref="SignatureAlgorithm"/></returns>
|
||
|
public short Signature
|
||
|
{
|
||
|
get { return m_signature; }
|
||
|
}
|
||
|
|
||
|
/// <summary>Encode this <see cref="SignatureAndHashAlgorithm"/> to a <see cref="Stream"/>.</summary>
|
||
|
/// <param name="output">the <see cref="Stream"/> to encode to.</param>
|
||
|
/// <exception cref="IOException"/>
|
||
|
public void Encode(Stream output)
|
||
|
{
|
||
|
TlsUtilities.WriteUint8(Hash, output);
|
||
|
TlsUtilities.WriteUint8(Signature, output);
|
||
|
}
|
||
|
|
||
|
/// <summary>Parse a <see cref="SignatureAndHashAlgorithm"/> from a <see cref="Stream"/>.</summary>
|
||
|
/// <param name="input">the <see cref="Stream"/> to parse from.</param>
|
||
|
/// <returns>a <see cref="SignatureAndHashAlgorithm"/> object.</returns>
|
||
|
/// <exception cref="IOException"/>
|
||
|
public static SignatureAndHashAlgorithm Parse(Stream input)
|
||
|
{
|
||
|
short hash = TlsUtilities.ReadUint8(input);
|
||
|
short signature = TlsUtilities.ReadUint8(input);
|
||
|
|
||
|
return GetInstance(hash, signature);
|
||
|
}
|
||
|
|
||
|
public override bool Equals(object obj)
|
||
|
{
|
||
|
if (!(obj is SignatureAndHashAlgorithm))
|
||
|
return false;
|
||
|
|
||
|
SignatureAndHashAlgorithm other = (SignatureAndHashAlgorithm)obj;
|
||
|
return other.Hash == Hash && other.Signature == Signature;
|
||
|
}
|
||
|
|
||
|
public override int GetHashCode()
|
||
|
{
|
||
|
return ((int)Hash << 16) | (int)Signature;
|
||
|
}
|
||
|
|
||
|
public override string ToString()
|
||
|
{
|
||
|
return "{" + HashAlgorithm.GetText(Hash) + "," + SignatureAlgorithm.GetText(Signature) + "}";
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
#pragma warning restore
|
||
|
#endif
|